CVE-2021-26030

State: PUBLISHED · Published: 2021-04-14 · Updated: 2026-02-25 · Assigner: Joomla

Description

An issue was discovered in Joomla! 3.0.0 through 3.9.25. Inadequate escaping allowed XSS attacks using the logo parameter of the default templates on error page

CWE

(none)

Affected

Joomla! Project / Joomla! CMS — v=3.0.0-3.9.25 [affected]

CVSS

(none)

References

https://developer.joomla.org/security-centre/850-20210401-core-escape-xss-in-logo-parameter-error-pages.html x_refsource_MISC, vendor-advisory

Source

cvelistV5-main/cves/2021/26xxx/CVE-2021-26030.json